Views
2

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

Update Summary

KB5093998 updates Windows 11 version 23H2 to OS Build 22631.7219 with the latest security fixes and quality improvements from KB5087420. It also addresses a BitLocker recovery issue, improves Secure Boot certificate rollout and device management, and enhances File Explorer search. Reference IDs: KB5094146, KB5027397, KB5082052.

Update Details

Security

  • Includes the latest security fixes for Windows operating system.
  • Secure Boot rollout improvements increase coverage for devices eligible to automatically receive new Secure Boot certificates.
  • Adds the LimitSecureBootRequiredServiceData Group Policy and MDM setting to reduce Secure Boot service data sent to Microsoft.
  • Fixes a boot manager servicing issue that could trigger BitLocker Recovery on systems with certain TPM validation settings and invalid PCR7 configurations.

Bug Fixes

  • Fixes an issue where some devices might enter BitLocker Recovery after updating boot files on systems with certain TPM validation settings.
  • Improves connectivity and certificate sync reliability for devices enrolled in Microsoft Management Platform Configuration and Secure Lifecycle Device Management.
  • Improves reliability for dual-enrolled devices managed by mobile device management platforms, including the Modern Management Platform Connector.
  • Improves File Explorer search support for Chinese text and UTF-8 files without a BOM.
  • Improves text rendering consistency in File Explorer search results, Content view, and tooltips.
  • Updates Country and Operator Settings Asset (COSA) profiles for certain mobile operators.

New Features

  • Adds the LimitSecureBootRequiredServiceData Group Policy and MDM setting under Secure Boot.

Hints

  • Use EKB KB5027397 to update to Windows 11, version 23H2.
  • Windows 11 version 23H2 Enterprise and Education reach end of updates on 2026-11-10.
  • Microsoft says Secure Boot certificates used by most Windows devices begin expiring in June 2026 and will continue to be updated through Windows Update.
  • If previous updates are already installed, only the new updates in this package will be downloaded and installed.

Links

Product Information

Vendor: Microsoft

Product: Windows 11

Version: OS Build 22631.7219

Release date: Jun 9, 2026